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(57) Abstract: Contents encrypted 
by content encryption keys AE R1 , 
AE R34 and content decryption keys 
AD R1 , AD R34 encrypted by encryption 
keys BE4, BE$, BE 7 are recorded 
on recording media (301, 302). The 
encryption keys BE4, BE 6 , BE 7 differ 
among p re-set reproduction areas 1-4 
to control the permission and inhibition 
of content reproduction. Content 
reproduction areas can be limited by 
using only the encryption keys of areas 
in which reproduction is permitted. 
Even if some keys are compromised, the 
other reproduction areas are not affected 
because the encryption keys differ 
among reproduction areas and therefore 
the copyright protection function is 
increased. 
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DM, DZ, EC, EE, ES, FI, GB, GD, GE, GH, GM, HR, HU, 
ID, IL, IN, IS, KE, KG, KP, KR, KZ, LC, LK, LR, LS, LT, 
LU, LV, MA, MD, MG, MX, MN, MW, MX, MZ, NI, NO, 
NZ, OM, PG, PH, PL, PT, RO, RU, SC, SD, SE, SG, SK, 
SL, SY, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, 
VN, YU, ZA, ZM, ZW. 

(84) J&5£ 5 ARIPO (GH, GM, KE, LS, MW, MZ, 

SD, SL, SZ, TZ, UG, ZM, ZW), J.-7V7^ (AM, 
AZ, BY, KG, KZ, MD, RU, TJ, TM), 3 — □ V 
(AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, 



GR, HU, IE, IT, LU, MC, NL, PT, RO, SE, SI, SK, TR), 
OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, 
ML, MR, NE, SN, TD, TG). 



(57) SIR): 

fBtttt#3 0 1. 3 0 2tt, =i ^y&IHHi AE^ AE^ J; 9 RfiHHfc $ tlfc =* ^T" 
V^t, Bf-^iBE 4 , BEg, BE 7 ^He : #{b^^fe^>'X> r y^"^S ADrj, Aty^ t^lS^^tX 
TV^ C Bt-WBE 4 , BEg, BE 7 « > = ^^y*f£©fF>T • ttffl&fimt&ltlbtt 



r 
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w m m 

ftmwssmt^ mmmmw. mmsmm. mmmmm, t^h<D^m. ^h<o 
*»wr*. ttHtiafi^^ flHMBft&ii* mw&mt. timeftm. 



10 Wft&W 

i^fVT (ffi$fBft&&) tVX, DVD (Digital Versatile Disc ) 
20 £r&l^LTV^ 0 



WO 2004/025894 PCT/JP2003/010839 

15 ofc„ 

s^itt, ^mm&m^x^mm^m&tizmm£%^&mmmmvx#>% . # 



WO 2004/025894 PCT/JP2003/010839 

jtjlfe 1 : TD. Naor, M. Naor, and J. Lotspiech, "Revocation and Tracing Scheme for 
Stateless Receivers, "Proceedings of CRYPT02001, Lecture Notes in Computer 
10 Science, Vol. 2139, pp. 41-62, 2001 J 

2 :. r^smA, j&mm, &w<?o#>, mm, "^^^^T^yumm 
mfgmtt-sm&'**-->ftp}tt- " 2002 m^rtym***- y tw^s?* a 

WRWfcSmpp715-720j 

15 Zfcitfc 1 7|cBBtSrffiV>fc«Wa^:0— o-efe^ Complete Subtree Method ;d$iB 

20 -smwitfe, wmm i *m^x^ikvits£%xz, raws*.* r.j (Dm^mBd, 

12 1 , W££m.tZ 1 6 i$m? ?>HT*5 19 % #l?£=g§g 1-16 tfS-W? 



WO 2004/025894 PCT/JP2003/010839 

&tlT^Z>5o<omf$mED u BD 2 , BD 4( BD 9 , BD 19 «:#x.TVn5 0 — j&lft^ 
^•fS^^liBDi^^ ^^e^m^N^i-^i: log^i tteZo 

Encryption (=r^>^-^AD, St^BE^ „ Encryption (=V7^.y, =^7 
5 V^Bt^AE) SrfS^L-C*5{t^J:^o ^r.T\ Encryption () fSBg^ffcT/WyXA 
«r*U Encryption (§1*1, 51*2) f43l*2 &W&mt 1 W^fbbfcBf 

tot, ^f^74 0 1tll ^^^Bt-i^iAE-ePt-i-fk^tb^^^-r^^^x 

af-^i be, T'Bt^fk; $ nfc = ^at^ii ad t tmm $ v ^rti^,, b£# 

10 SiBE 1 ^^i-5«#@BD 1 ^ ^TO?¥^ffil~l 6aH^LTV>5fci£\ 

^« l-16ft ^7^74 0 1 SrH^i-SRHltt, flWTf-Stt-S*! BD, wr = 

1rZ>tc#><D§i UV ^ = >T >yf&%m AE, £ , -tfrK^ftS^S = AD 2 Srffl 

#U =>'X^«i^ffUV^>'^>'^Bf-^AE 2 ^V^Bt^flii-5„ 

20 ^-cbttxv>5Bt^iiBE 1 -c% m^^^ym-tmmtZvg^ki-Zo 

5t^#mtl^^9^ «-^BD 3 , BD 5> BD 8 , BD K ^V^T=i^^^##iAD 2 

■5: IT, mJlBBt^b$^ci='V7 i ^^=Encryption (ayfyy, aV^^yBf^t 
25 AE2) t % BlHMfc £ *Lfc 3 Vv 1 >^&-J§-#i AD 2 =Encryption (= >^^y«#» AD 2 , B£-5§- 
^BEj) | Encryption (=* V^^^-^AD 2 , Bf-J§^ BEg) | Encryption (=r;/-^>-.y^-j§-$i 
AD 2 , Bf^BEs) | Encryption (^^V^-f^AD* Bf^«iBE I8 ) SrjWfcJte^W T 4 
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10 — rij s #£b&W — Toj -C^-fo tl/t, CltLfe©ffi[Sr*flBtO&** 



15 itif>o#itl, 2fclB*fc&h,fcdK«tt. 4#^#^3S«K:*5^««^«t©^Wk 



WO 2004/025894 PCT/JP2003/010839 



5 ^0J<DBi^ 

«B*w«>sri^*5flmiB«*«^ it^iB^*, if^s^e^ MoeflHM. 
tt&mnmmBmmmft. ^T>y (on^A^m & tit^mmu^. tat = y^y^s 



WO 2004/025894 PCI7JP2003/010839 

^y *-jh»s^» mm* ^T^ym^mzmm Lt^yf %m-&-tz> =» 
tcmmmzmte ^ tuts ^ ^ vy Bt^&fc j: imie >ym-%mn, * w 

mdm^ktstit^i/^i/yzm^ik^ztzMcmm ^ti^m^mm^ -%mxm jhk 



WO 2004/025894 PCT/JP2003/0 10839 



0 3 ri*55K^ i mmmm^^^^m^m<Dm^^irfxi -y?mxnbz> 0 

04r±S&8E03H:*5»t5'fE-f-S l©^-^7*-^? bSrSH"0"C&5o 
El 5 tefufSEI 3 m*3lt 5flT "^-S 2 ©f-^7*-7 >y h SrjjrfBI-efeSo 
06 W:^gBia3lJ:*5tt5fll-^S 3©^— ^7*—* hSr^H*BI"t?&So 
M 7 tefuiBEl 3 tc*5tt5flr-^S 4 <ryf—9~7it—^ y V &7rrrm-e&z>o 

|gj8{iSufBI213^*5^^)'fs-§-S 5^7-^7^^^ hSr^-gl^&So 

HI 9 teiuiEm 3 mastt 5-ft#s 6 oyf—^y*—^ v V &&tfflvibZ>o 

mi 0ttWIBH3KU3tt«{9*S 7©9*— ^7*—* h&TiHiaT-fc&o 
HIl 1 fiStllsm 1 ISKBgllBfciastt 5SM«Sr^t7n j/ * 0T*fe5 o 

11 1 2 (*huIeei 1 1 icssitsft #s 1 1 oyf—# 7*—^v v &^i-mxhz> 0 

Ell 3teiufEEll llCfc5tt5ft#S 1 2<E>x— 9*7*—* HSr^-rBI*Cfc5o 
El 1 4 ttitrlEBI 1 lK:*5tt3ftM§'S 1 3©f^7t-^5' hS:^M"E-e*>5o 
Ell 5 tef&fBEl 1 1 icl*3tt^f^-S 1 4<D7 s *-*7*~~=?y h&^-tmXh&o 

mi 6itwmmi n^n^m-^s 1 5©f-^7t-^s' b&^-ria-cfcSo 

Ell 7 tei&lEEl 1 l(c:*3tt-5fs#S 1 6<D^r—?7*—^y h&7rrfmxtbZ> 0 

Eli sfitfrfBmi^W^-^^s^s^^^-f-^^iii-C'fcSo 
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in 2 o rttOTBffi i mmrm^&mwvm&mm^-r? n-^r- bTNfc*. 

HI 2 2 te#3§^©3l 2 ^i^ffi^»t5»ra^*^t^0"^ ifo5 - 

HI 2 3 3 ^^fci&ttSS^f S^SriaH^SB^fc*- 

in 2 4 ttswa» 3 mmmmi^-f sitsM^^tt^^fe^o 

hi 2 6 r£*aH®*4 ^j^m^ttsis^s^^^^^^^^ 0 y * 

<fc><5o 

£ bT<^S^m2 0 0 Sr#^LSIB«?^V^^ATffc5o 

*ie^ifi©SB»SfB ioo ©m^® 3 ©^n * * m*^m \^xmm-rz>o - ©ib 
&gie loon cftpt f^ri u-c^xV * * ffl own i o i k = *•* & 

m 3 ^Tjk-tmmm 100 k&v v-c 11101 <D^wm^t> 
mmm&t& ^ rm^ntimmi o 1 iaoXDVD-ROM (Digital 

Versatile Disc - Read Only Memory) ft WJbfe^CaW«»fl«»*nfcW&W«>* 

ft^(*fffc>ftv\ 

0WiOOtt i3{^i5t, T^A^IHS&l lOt, 3 ^y^fi 



WO 2004/025894 PCT/JP2003/0 10839 

W W 

4ot, m-mm^^^^^x^mm^m^m^i 50^ =i^T^ym^m 
m^mxh^^f^rmm^i sot. ^#^Tv^s 0 

^^^-HJi^llO, 1 2 0, 1 3 0, 1 4 0, 1 5 0, 1 6 0, 1 7 0}±,» 
s^pt^TK^XMf&iBtlX^^X^X^U IB^eiOOt^S^fi (CPU) 

^^tixmn^n^^y^M,t^^^xMMit^^h(Dxh^\ 
mmioo\z.xti-tz>m&xibz> 0 nyfyyam a*. **. 

s i zmti-rz>®&m&mmx% z> 0 

ft*5 % ft#S l©f-^7t- -ry Y<D—m^ ®4^-T 0 jf-5§-Slte. 

=i^T->ym.^mAtimmi 2 on, z3^>yfr*m<Bm?&z=>^*ywm 
AD ft «rA^-rsiHis&-efc5o =^^^ym^mAt)m^i 2011 a^^^^^v 
y*** ad r srflr-s-s 2 * vx^^^ym^m^itmmi eoi^ts. 

t =» w&%m AD R *Wtfe U fll-g-S 2^u-cW^-f-So 



WO 2004/025894 PCT/JP2003/010839 

fe*S2<0?*-*:7;*— -rjx KZ>-M£> H5K^H-. «#S2Wu 3 ^^«t 

5 ^2pc-c, r**, mmr^r, *fr*y#* *-*b:7 

SfcWi* iOfffiNBUi. *n]*fl«\ m^^^W"^^ x ^>^' 

a^y^yB^yOEjElMH 3 0 tt, ^7**tfc3>^vyifrMiA^«^l*S 3 t L 
10 "C^-^«f*fclSI»14 0Kim*-rS. a^^ANM^**^^* 
■SteAD^i, P=Decryption (Encryption P. ^^X^Bf^AE,) , 

ft AEr <DfrX*M&,&tlX V ^ 5o 

---C, Decryption 0 tt*-*ffcT^=*y XA*«t. ^tT, Decryption (§1*1, 
91*2) »§|»2fc«^iU-C9l*l*«*bfc9'-^*3irt-. *oT, ±BPtt* 

20 SlADR^V^Tm-^U^— ^t?feSo 

yyyS'fclWftU «-^S4=Encryption (a^^, a>^y«f**A£> «r 
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tlZZkh&V. mZ-tfs N^IOBt^BE,, BEa, BE,, -BE^, BE^^A^^tbfc 

^Bt^A^IUS&l 5 0H «*S S-lWfcBE, | Bf^PlBE, | - I Bf## 
BE, | - I Bf^BE^ | Pf^BEn *tittiTZ> 0 lot, 5 }*S&fc#glA*lElB& 

1 5 0^±orA***tfc4W©l«^BE|*^*^^-^^* 9 - £«M»S 5 

-5§-S 2=3Vx^«#^AD R ?:Bt-i-^U ^lH^y^HWR Header (Bf-^BEj) 

r^-e, ff^S6=Header (B|r^"$t BEj) | Encryption (=^r^«## ADr, H&^§- 
gSBEj I Header (Bt^ BE,) | Encryption (n^^ffi^AD,,, Bg##l BE,) | - 
| Header (tiMMfeBO I Encryption (^^^S^ADr, Bf^BE,) | - I Header 
(Bf^BE,.,) Encryption (^x>-^#£IADr, Hf^ BE^) I Header (Bf^l 
BE,) | Encryption (=* Vir i'S'fc** AD,,, Bf^BEn) "Cfe^o 

^T^f*, ^^C^fB-r^^fe, m-^S6=Header (B£-*§-$t BE £ ) | Encryption (=t 
^X^«-^ADr, Bt^BE,) tm-To -Ttott. flt*S6f4, ®9l^i-J:5^ 

Header (Bj^fiBE,) ^«c£*l/-tV^„ 

^y^HWRHeadar (Bt^BE,) tt, UfcBf^BE^WJrSfcfcl- 

^7-|TjEIhU^17 0^ <f-*§-S4=Encryption (^T^, ai^^lflMMt 
AEr) fc, m-^S6=Header (B^lBEi) I Encryption (a Vt 1 AI^ Bf#^ 

BE,) ^A*tU *tbfe*IS^bT*9HnjEI^«^Ufcfc©^*S7fcU 

Hf S 7n si oK^-rt?^ ^Ti/y Bf « aEr -enf-iHk isti-tz^^ 

yt, N^Bt^BEi^Bf^k^ttfcN^O^^^^-^ADR^, £*SH§« HE, © 
^y^HWRt, ^7~tTJEn&tfrbteZm-f§rX*$>Zo o£<9. S7=Header (Bf# 
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fll BEi) | Encryption ( =• ^7^^^! AD R) Bf^H BE,) I Encryption ( = ^"f W , 
mT5\ ECC (Error Correcting Code) {3:^7— fTjE^-^^UTV^o 
5 *^T|B*¥*1 8 Of*. A*^ft«*S7«r, 3^ **Xtt#5^r***r* 

•citi o i asffli^bftSS&^-Wu JWS* ^tgSS^^^-f tie 

«18 0H«^5o fBfMT^T^UT, DVD-R, DVD-R 

W, DVD-RAM. CD-R^O|B^"5^t^#a^:^7 ^ ^T^V^^,tt6^^-^^ 

7fe*5 N ^x^f 7W8 18 0 mioT9*—^*5|a»$tbSIB»^7*>f T £ LTH 
fCfe5^t2 0 OoWM(::ov^, HI l 1 fc^-^n <y?m&£Tm l 2~ 

20 «-*®&2 4 0 3 v^>-ym#^-efcS7 5 -^^iHis&2 sot, ¥te^are*> 

So 

— fty^** 2 0iit HfflsiB^fti o o-ef*-^* s l5»$*bfciSffii o 1 

25 ^7t^5t^tvfcl5^^^Ti:U-CO3fe7 f -Y^^2 0 1^9, MtSDVD-RO 

M^CD-ROMT*&5o 

^«-mg&2 2 0, 24 0, 2 5 0^«^IB'li^g2 3 0, 7=^2 6 0(1 
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if #^#^2 1 Ott, ft?*** 2 0 1 ^|5^^tbfcit#^^^^:t 0 5/^T^ 
!7^©5I»?*>?K 1 1 SrtH^-fSo f»S 1 l=Header (HftttEEt) | 

5 Encryption (=^X^^-^iAD R , Rf-^BEi) | Encryption (=t>ir^y, 

^Bt-t#i aEr) I Eccfi, flMRW®^ 210 -e^v ^20 1^ tbfc 

It^OBf^iiBEi^V^Bt^^^^V^^m-^ADR^, #Bt-§^BE i (D 
10 ECCtlrIx.-C^5. 

^7-tnEIHSg2 2 0li, friE^^#^'f&#S 1 2=Header (fftHNPi BEj) 

| Encryption (=t AD R , Bt##BEi) {f-^S 1 3 =Encryption 

15 T^y, =t^T>y^m/E^ b\z.&tfxmtrtz> 0 

Hf -^i BE t T'Bf £ =» 1ST is^m^m AD R £ , Rf-^BEi ^y^HfiOi^f 

— i#S13ll @14{C/Tti5l-> a^^Bt^AER-eBf^-^^tbfcs 
20 ^^^9,11^4^1:^^, 

m-^iBit^fi2 3011 £-w£ugg2 0 ois^rr5ifiis^es<z>«^«i 

BD„ BD 2 -"BDj—BIVi, BD^£, %:<D^-y?— fflf Header (^C^iH BD^ , Header 
(«#fiiHDi) , —, Header tfg-^BDj) , — . Header (tJt#»HVi) » Header 

25 «-g«SB«sii 230 m-mm 200 asm-rs n^mmi^m v^xb 

tift 1 o^WWW^ft <it)loh 2 0 0 fe^fij 5 m X bti 
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fflc^Bf-^BEii:, P=Decryption (Encryption (te&^f*— *P. Hf^BEi) , 

±|Bil#©Bt^BE i ^m##BD j l3:#*D$^fc^s/^--^OV>-C, Header 
(Bf^BE,) =Header (ttHi-iiBD; * 5 |E^y^-©*#ft*>&*t 

BD, | m^m^2 I - I ^^BD, | - I m-^BIV: I *-WtB^ > *<0^5^H*« 
Header O&tStBD,) | Header (tt«efl*) | - I Header tffC^BDj) | - I Header 
Ojg#«iBIVi) I Header Og^iiBDa) t£Hf£.£ 0 

ayfyy«f«S^iaJ&240tt, fits 1 2 is 1 4k%AtibU 

2 0 1*»fe»WiA/«^ ^-Header (Bf^BE,) t> K4il2 0 0«S»«t5^ 
y ^-Header GKMlDj) fejftS-W"**^**^ flt^fcBDj* 
fflv , TBt ^ $ ^ xfc=I VxV^«-^iAD R =Encryption (= ^y«-§#tADg, 

BEi) zm^-tzmfe'ehZo 

Decryption (Encryption (=*^^«**AI>* Bt^BE,) , tfttttEDj) "C***,*. 

fl»s 1 5*m;*resfcv\fc«>, »4it2 oormfi«»a^^^^? 2 0 

?*-*«#|iH62 5 011 «#S 1 3 tilfS 1 5bZA*t U «*S 1 5 fcfl^ 
-Cjf-^-S 1 3 SflStU ^<D%g£k~?&Z> Decryption (Encryption (^VxV^, = ^-7* 

I6i UTtttfi1-5III8&-efcS. 
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$ tbfc =1 ^ ttx ^ \?mx-mti £ ns ft 5 o 
tuts, ^mmftzmm-tzm^ =■ yr^^ 

tifr*&tttos&-^<mr>mxibtiz. ^x. e*wwos-r 

So 

fe*5, fMWtffc*© J: 5 K> VO&m BE, fc *h**ltt««* BD, t *s#» (R 
*V\ fc*S. SIS, 019T11 ^^-h^^-^BDjO^^U Bt^BEi 

^pfcUTv^o 

#$J5#*<D/W- MH«9 ^TbtbSBf^i BE 4 ~BE 7 *3J:tm#^ BD 4 ~BD 7 tt. 
—)5, «B^*«>!J-7B:«5 ^-Cb*b5B£-^P£ BB,r"^ ******** BD 16 ~BD 31 f3\ 
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(H.U ^-Bf^iiBE 16 ~BE3 1 *5J;tm#liBD 16 ~BD3 1 ^ /W- bRt^U-70W©/- K 
-effl*ttfc3oOm^iiBD 4 , BD 9 , BD 19 £^LTV>5o 

m^zw&mm m^m^mmi, 2m) xn, &mtz>mfm mitimm 
bd 4 , BDg) ^w^ri-sa^ s^^^m^ss^e^ ^R«s4st 1, sfa) x 

ymsmtEn) t, w^mmi<D^hKh^\^^BE 4 x^^t^ntc^^T^ym. 

##AD R1 =Encryption (= ^^WteADb,. Ht-^iBE^ t^^73 0 1ll|B» 

— *\ ff^P 3 , 4 ^^•CS^RTtl'fc^ 7>f T 3 0 2 SrfftfrrSii^fctt* 3 >^ 
^^Bf-^AE ro4 TBt-^'fb^tl,fc=iVy i ^=Encryption (a^^iX, aV^yyU&t 
^AE^ S^«3, 4<D/W-MJlfoSBt#«iBE 6N BEjT^ttmBf^^^^ 
^yU-tm AD R34 =Encryption (= ^xV^^liACW, B^HBEg) I Encryption 

(a^Vyfc-HtAIW Bt-^iBE,) i:^f>f730 2JC|B»UT*3it«EJ:V\ 
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W w 

4 £jw.©teoH^sai i~3 £tizu&**m&u *©as^*©flf^i 

BEg, BE 18 £fflv^frf~ra£ aaw) **tfca^^y«fl«Arw***ft:u *Tfcft 
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